---
title: "Japan Digital Agency GSS unauthorized access"
description: "Japan Digital Agency GSS unauthorized access: verified timeline, impact and response through October 7, 2026."
incident_type: "Data incident"
status: "active"
last_modified: "2026-10-07"
canonical_url: "https://www.ally.security/incidents/japan-digital-agency-gss-unauthorized-access-2026"
markdown_url: "https://www.ally.security/incidents/japan-digital-agency-gss-unauthorized-access-2026.md"
stix_url: "https://www.ally.security/incidents/japan-digital-agency-gss-unauthorized-access-2026/stix.json"
---

# Japan Digital Agency GSS unauthorized access

Japan’s Digital Agency confirmed unauthorized access to Government Solution Service (GSS).

Last modified Oct 7, 2026 · 1 source

## Summary

- **Environment:** Government Solution Service
- **Operational impact:** Compromised account suspended and device isolated
- **Financial impact:** No incident cost established in the reviewed evidence

## What happened

[Japan’s Digital Agency](https://www.digital.go.jp/) confirmed unauthorized access to Government Solution Service (GSS). [1](#source-1)

## Impact

Approximately 246,000 personal-information records potentially leaked, involving government personnel and work contacts. [1](#source-1)

## Timeline

### June 25, 2026 — Anomalous access detected

Mass file access triggered investigation. [1](#source-1)

### July 9, 2026 — Compromise confirmed

Investigators confirmed intrusion and isolated access. [1](#source-1)

### September 11, 2026 — Public disclosure

The agency published its [notice](https://www.digital.go.jp/en/news/2026-0911-01). [1](#source-1)

### October 7, 2026 — Briefing updated

This briefing was last reviewed and updated on October 7, 2026.

## Threat Group & Attack Vector

The agency identified exploitation of a VPN-device vulnerability. [1](#source-1)

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific MITRE ATT\&CK technique is currently mapped for this case.

## Response

It suspended the compromised account, isolated the device and planned individual notifications. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/japan-digital-agency-gss-unauthorized-access-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### Possibility of Leakage of Personal Information of Employees, etc. by Unauthorized Access to Government Solution Services

official · Digital Agency, Government of Japan · Sep 11, 2026

<https://www.digital.go.jp/en/news/2026-0911-01>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Discovered At · 100% confidence · current**  
   Japan Digital Agency GSS unauthorized access: 2026-06-25
2. **Exposed Data Category · 100% confidence · current**  
   Japan Digital Agency GSS unauthorized access: Contact information
3. **Resulted In · 100% confidence · current**  
   Japan Digital Agency GSS unauthorized access: Japan’s Digital Agency confirmed unauthorized access to Government Solution Service (GSS).
4. **Resulted In · 100% confidence · current**  
   Japan Digital Agency GSS unauthorized access: Approximately 246,000 personal-information records potentially leaked, involving government personnel and work contacts.
5. **Exposed Record Count · 100% confidence · current**  
   Japan Digital Agency GSS unauthorized access: 246,000 record
6. **Resulted In · 100% confidence · current**  
   Japan Digital Agency GSS unauthorized access: The agency identified exploitation of a VPN-device vulnerability.
7. **Disclosed At · 100% confidence · current**  
   Japan Digital Agency GSS unauthorized access: 2026-09-11
8. **Affected Organization · 100% confidence · current**  
   Japan Digital Agency GSS unauthorized access: Digital Agency, Government of Japan
9. **Resulted In · 100% confidence · current**  
   Japan Digital Agency GSS unauthorized access: Compromise confirmed
10. **Exposed Data Category · 100% confidence · current**  
   Japan Digital Agency GSS unauthorized access: Names
11. **Resulted In · 100% confidence · current**  
   Japan Digital Agency GSS unauthorized access: It suspended the compromised account, isolated the device and planned individual notifications.
12. **Occurred At · 100% confidence · current**  
   Compromise confirmed: 2026-07-09

</details>